- /opt/minemeld/local/prototypes contains local prototypes libraries. This is the directory you want to put your own prototypes.

A prototype library is a YAML file with the following structure (from dshield.yml library):

# library author, optionalauthor: lmori# URL with more details, optionalurl: https://www.dshield.org/xml.html# library description, recommendeddescription: > The ISC uses the DShield distributed intrusion detection system for data collection and analysis. DShield collects data about malicious activity from across the Internet. This data is cataloged and summarized and can be used to discover trends in activity, confirm widespread attacks, or assist in preparing better firewall rules.

you should create a prototype based on minemeld.ft.json.SimpleJSON (you can start from aws.AMAZON prototype), and configure it like this (note that the following prototype won't work because S3 does not accept Basic Auth headers):